Contrib.social

Shortcut API should not use ::getEditable on config

Open on Drupal.org →
Created on 12 June 2024, 17 days ago
Updated 16 June 2024, 13 days ago

Problem/Motivation

The shorthand API service calls ::getEditable on the config factory - this bypasses config overrides (e.g. settings.php) and therefore means the secret needs to be stored in plain text in config rather than loaded from e.g. a secret management system or environment variable.

Steps to reproduce

Proposed resolution

Don't use getEditable

Remaining tasks

User interface changes

API changes

Data model changes

🐛 Bug report
Status

Fixed

Version

4.0

Component

Code

Created by

🇦🇺Australia larowlan 🇦🇺🏝.au GMT+10

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

contrib.social Blog FAQ Discussions
Production build 0.69.0 2024